Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/323830343a376161383a3a2f33322d313238203d3e20323731333834.roa
File:                     323830343a376161383a3a2f33322d313238203d3e20323731333834.roa (raw, json)
Hash identifier:          a+fBGAJA0YTSLa/t1zXl70kQBDA6crIRO3A1NFgqfdU=
Subject key identifier:   9C:93:AA:6E:C1:8B:FE:36:FE:1E:1A:82:7E:42:84:69:81:7D:47:35
Certificate issuer:       /CN=10EC5E4CC1905B32F23845726B4A13773CC62985
Certificate serial:       1ECD6EAAA68108A519CC697F46D2DFB60BCA57BC
Authority key identifier: 10:EC:5E:4C:C1:90:5B:32:F2:38:45:72:6B:4A:13:77:3C:C6:29:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10EC5E4CC1905B32F23845726B4A13773CC62985.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/323830343a376161383a3a2f33322d313238203d3e20323731333834.roa
Signing time:             Wed 28 Jan 2026 14:18:36 +0000
ROA not before:           Wed 28 Jan 2026 14:13:36 +0000
ROA not after:            Wed 27 Jan 2027 14:18:36 +0000
asID:                     271384
IP address blocks:        2804:7aa8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.crl
                          rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10EC5E4CC1905B32F23845726B4A13773CC62985.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Mar 2026 01:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cd:6e:aa:a6:81:08:a5:19:cc:69:7f:46:d2:df:b6:0b:ca:57:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10EC5E4CC1905B32F23845726B4A13773CC62985
        Validity
            Not Before: Jan 28 14:13:36 2026 GMT
            Not After : Jan 27 14:18:36 2027 GMT
        Subject: CN=9C93AA6EC18BFE36FE1E1A827E428469817D4735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:e8:cb:05:61:94:5d:68:e4:17:14:bc:c6:
                    9e:61:7f:e0:96:d8:57:6d:bb:84:bf:2c:c1:ca:b4:
                    e8:2f:9c:29:59:9c:d9:a2:e6:37:86:4e:76:51:2e:
                    6d:a3:de:dc:b6:78:6d:c1:e1:17:b1:82:b4:19:dd:
                    bf:4d:f8:d8:54:c4:b5:ee:c1:82:c6:71:aa:6f:c1:
                    9a:60:dc:f9:b4:66:8b:cd:49:0e:a6:9f:51:01:8a:
                    5a:d7:23:01:62:6b:57:55:74:62:ad:42:11:1b:2f:
                    4f:a2:50:6a:b8:c7:7d:2b:84:97:38:8b:be:24:ff:
                    b1:be:df:2e:af:44:9f:fb:95:0e:2c:f9:4c:6f:61:
                    08:9d:9a:84:42:31:b3:aa:c1:ea:3d:ec:2b:26:d2:
                    4a:84:71:38:cd:22:5b:19:e9:c1:a0:e7:9e:f2:42:
                    12:03:db:08:11:02:d3:20:78:5e:04:80:76:cb:9c:
                    cf:43:d3:ed:53:de:12:09:9f:0d:9d:8b:55:b0:2a:
                    79:4b:46:40:fd:dc:d1:bc:5a:bf:fd:b0:29:dc:1c:
                    07:9f:00:79:65:16:ee:49:f1:af:d1:c0:59:7e:86:
                    99:d6:1d:f8:b2:6a:eb:d2:65:d4:98:7e:7d:2a:ab:
                    a9:2a:99:6d:b7:93:9b:15:be:dd:22:ea:14:de:f3:
                    da:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:93:AA:6E:C1:8B:FE:36:FE:1E:1A:82:7E:42:84:69:81:7D:47:35
            X509v3 Authority Key Identifier:
                keyid:10:EC:5E:4C:C1:90:5B:32:F2:38:45:72:6B:4A:13:77:3C:C6:29:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10EC5E4CC1905B32F23845726B4A13773CC62985.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/323830343a376161383a3a2f33322d313238203d3e20323731333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7aa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:56:1b:54:83:d2:59:29:63:a3:d0:80:23:b2:94:ec:7a:93:
         c3:9e:f4:f4:2e:dc:46:37:4c:b5:85:05:39:62:67:38:92:30:
         b9:b5:e4:82:3e:2b:7f:bc:0f:38:35:02:0d:67:77:be:92:ce:
         81:be:e4:5f:04:47:cf:98:18:b7:a6:5f:1b:66:cd:ce:c2:25:
         7b:ed:f8:88:4c:b6:ad:a1:2c:7e:87:92:61:86:2b:fe:fa:6b:
         2f:d7:71:98:20:29:68:58:61:d8:bc:0f:29:7d:1d:07:1e:d0:
         0a:52:24:2c:a7:a7:73:cb:80:d3:e2:45:5f:a1:2f:56:2d:f9:
         05:ef:c0:a8:d1:19:d6:fd:1f:ec:e1:12:5e:c9:47:7d:bb:9b:
         9c:90:72:f6:88:86:2e:96:ae:70:6b:fe:fa:63:b1:9a:13:46:
         e7:d9:e0:ef:42:e6:6d:82:9f:2a:ed:35:bb:65:71:ec:e9:ed:
         4f:90:35:a9:4e:6a:7f:ff:8c:3d:8d:dd:e1:bb:24:ea:c1:eb:
         c9:73:a0:44:14:f2:ce:94:2a:cb:f0:cf:1a:48:21:28:36:11:
         75:b0:8e:94:29:73:c5:3d:ae:83:f9:a0:41:4c:12:21:f6:25:
         2a:32:a8:c6:c5:c2:3b:25:60:40:26:89:dc:6a:55:f8:d8:68:
         92:95:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:30:43 2026 by rpki-client